resme

Privacy policy

Last updated [date of review]

Draft: not yet reviewed
This page is placeholder text waiting for the owner's review. It isn't legal advice, and parts in [brackets] are still to be filled in.

resme helps you write a resume, check it against job postings and keep track of your applications. To do that it has to store personal details: your name, your contact information and your work history. This page explains what we keep, why, and how you stay in control of it.

The short version

  • We never sell your data. Not your resumes, not your job search, not your email address.
  • We don't use your data to train AI models, and we don't let anyone else use it for that.
  • Your resumes are private unless you share a link to one yourself.
  • You can download everything in your account, or delete it, from Settings at any time.

What we store

  • Your account: your name, email address and password (stored only as a one-way hash). If you sign in with Google or GitHub, we store which account you linked, not your password there.
  • Your resumes, including their design settings and their version history, so you can undo changes and restore an earlier version.
  • Your job tracker: the companies and roles you add, the job postings you paste, your notes, and which resume you used.
  • Your cover letters and the resume and job each one is linked to.
  • Feedback you send us, and the page you were on if you choose to include it.
  • Sign-in records: for each device you're signed in on, the browser, IP address and when you signed in. We use them to keep your account secure and to show you your signed-in devices.

When you import a resume file, we read the text from it and don't keep the file. Job match scores and keyword suggestions are worked out from your resume and the posting each time you look at them.

Where it's kept

Your data is stored on servers run by [hosting provider] in [region]. Emails such as sign-in links and password resets are sent through [email provider]. These companies process data for us under contract and can't use it for anything else.

Analytics and cookies

[Describe the analytics that run once spec 5.3 is decided: the tool, that it records which features are used but never the text of your resumes, letters or job postings, and how to opt out.]

resme sets two cookies of its own: one that keeps you signed in, and one that remembers this browser has signed in to your account before, so our protection against password guessing doesn't lock you out. We don't use advertising cookies.

Shared links are public

When you share a resume, anyone with the link can view and download it, including your name and contact details. We ask search engines not to index shared resumes, and the link shows no preview image when it's pasted into a chat. You can stop sharing at any time, and the link stops working straight away.

Download your data

In Settings, choose Download my data. You get one file with your account details, resumes, version history, job tracker and cover letters, in a format other tools can read.

Delete your account

In Settings, choose Delete account. Your shared links stop working and you're signed out of every device at once. We then keep your account for 30 days in case you change your mind: sign in before then and you can keep it. After 30 days, your account and everything in it is permanently deleted. Copies in our backups are erased within [backup retention period].

Who can see your data

Only you, plus anyone you send a shared link to. [Say whether, and when, the resme team can look at an account, for example only to fix a problem you've reported.] We'll only hand data to anyone else if the law requires it.

Contact

Questions about your data, or a request we haven't covered here: [privacy contact email]. We'll reply within [time frame].

Changes to this policy

If we change how we use your data, we'll update this page and tell you by email before the change takes effect.